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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1 . (currently amended) A system for managing administration of computer services 

provided to users comprising: 
a computer system; 

an operating system running on the computer system; 

a server process launched by the operating system for providing a service to a user 
a plurality of server processes running on the computer system, wherein the processes 
provide services to a plurality of remote users ; and 

an isolated at least one designated Virtual Private Server (VPS) with a set of services that 
perform administrative operations relating to one of the server process and the operating system , 
wherein the designated VPS provides administrative services to each of the server processes and 
wherein the designated VPS is isolated by a logical isolation of processes . 

2. (original) The system of claim 1, wherein the server process is any of a file 
server, an authentication server, a chroot environment server, a jail environment, a print server, a 
POPS server, an IMAP/IMAP4 server, an SMTP sei-ver, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a file replicator server, an indexing server, a firewall server, a Kerberos server, an IPSEC 
server, a logon server, a Network DDE server, an NLA server, a performance logs and alerts 
server, a plug and play server, a print spooler server, a protected storage server, a disk encryption 
server, a routing server, a remote access server, a system event notification server, a telnet server, 
an uninterruptible power supply server, a Windows Management Instrumentation (WMI) server, 
a wireless configuration server, a WMI performance adaptor server, a data base server, a network 
address translation server, an IRC server, an inetd server, a volume shadow copy server, a boot 
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and remote boot server, a finger server, a who server, a rexec server, a webster server, a 
conference server, a zip server, an afbackup sei-ver, an ASP server, and a fido server. 

3. (original) The system of claim 1, wherein the server process is any of an FTP 
server, a sand box environment server, a chat server, an X windows server, a secure shell (SSH) 
server, and a socks server. 

4. (original) The system of claim 1, wherein the server process is a webserver. 

5. (original) The system of claim 1, wherein the server process is any of a file 
server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, an instant 

messaging server, a message write server, a security account manager server, a telephony server, 
a virtual disk server, a Windows installer server, a radius server, and a backup server. 

6. (original) The system of claim 1, wherein the server process includes any of a 
WAP server, Plesk server™, a Virtuozzo™ server, a Virtuozzo for Windows™ server, a 
wireless access server, a wireless router and a wireless access point. 

7. (original) The system of claim 1, wherein the administrative operations include 

any of: 

collection of statistics relating to the server process; 
servicing of requests for management of the server process; 
servicing of requests for management of operating system functions; 
servicing of requests for computer system resource allocation; 
servicing of requests for computer system resource re-allocation; 
servicing of requests for authorization within the operating system; 
servicing of requests for authorization within the server process; 
servicing of requests that the server process is forbidden from executing; 
servicing of requests that the server process cannot execute; 
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servicing of operations that potentially can cause a fault in the server process; 
servicing of operations that require multiplexing of server processes; 
data backup and restore operations, update and patch installation; 
checking permissions for operations; 
security-related analysis and operations; 
audit of operations; 

application installation and configuration; 

network and other OS and application parameter configuration; 

driver installation and upgrade; 

spam filter operation; 

firewall installation and configuration; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; and 

remote access management. 

8. (original) The system of claim 7, wherein the multiplexing is performed using 
separation of requests based on a different network protocol address. 

9. (original) The system of claim 7, wherein the multiplexing is performed using 
separation of requests based on a content of a request directed to the server process. 

10. (currently amended) The system of claim 1, wherein the administrative 
operations services include any of: 

servicing of requests for authorization within the operating system; 
servicing of requests for authorization within the server process; 
creation and deletion of users; 
creation and deletion of groups; 
license-related management; 
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remote access management; and 
security-related analysis and operations. 

11. (currently amended) The system of claim 1, wherein the administrative 
operations services include any of: 

servicing of requests that the server process is forbidden from executing; 

servicing of requests that the server process cannot execute; and 

servicing of operations that potentially can cause a fault in the server process. 

12. (currently amended) The system of claim 1, wherein the administrative 
operations services includes include application installation and configuration. 

13. (currently amended) The system of claim 1, wherein the administrative 
operations services includes include data backup and restore operations. 

14. (currently amended) The system of claim 1, wherein VPS isolation can include 
comprises any of logical isolation of processes , physical isolation of processes, namespace 
isolation, data isolation, address isolation, fault isolation and performance isolation. 

15. (original) The system of claim 1, wherein VPS isolation includes resource 
isolation. 

16. (currently amended) The system of claim 1, wherein the administrative 
operations services include any of servicing of VPS migration requests; 

servicing of processes migration requests; and 
servicing of requests for computer system resources. 

17. (currently amended) A system for managing administration of computer services 
provided to users comprising: 

a computer system; 
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an operating system running on the computer system; 

a plurality of server processes running within on the computer system that provide a 
service services to a plurality of remote users aser; and 



each of the designated VPSs provides administrative services that perform administrative 



by a physical isolation of processes. 

18. (original) The system of claim 17, wherein the server processes include any of a 
file server, an authentication server, a chroot environment server, a jail environment, a print 
server, a P0P3 server, an IMAP/IMAP4 server, a SMTP server, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a file replicator server, an indexing server, a firewall server, a Kerberos server, an IPSEC 
server, a logon server, a Network DDE server, an NLA server, a logs and alerts server, a plug 
and play server, a print spooler sei-ver, a protected storage server, a disk encryption server, a 
routing server, a remote access server, a system event notification server, a telnet server, an 
uninterruptible power supply server, a Windows Management Instrumentation (WMI) wireless 
configuration server, a WMI performance adaptor server, a data base server, a network address 
translation server, an IRC server, an inetd server, a volume shadow copy server, a boot and 
remote boot server, a finger server, a who server, a rexec server, a webster server, a conference 
server, a zip server, an afbackup server, an ASP sei-ver, a fido server, WAP servers, Plesk 
server™, Virtuozzo™ servers, Virtuozzo for Windows™ servers, wireless access servers, 
wireless routers and wireless access points. 

19. (original) The system of claim 17, wherein the server process is any of an FTP 
server, a sand box environment server, a chat server, an X windows server, a secure shell (SSH) 
server, and a socks server. 



a plurality of designated Virtual Private Servers (VPSs) administrativ i 



T, wherein 




-to each of the server processes and wherein each designated VPS is isolated 
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20. (original) The system of claim 17, wherein the server process is a webserver. 

21. (original) The system of claim 17, wherein the server process is any of a file 
server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, an instant 
messaging server, a message write server, a security account manager server, a telephony server, 
a virtual disk server, a Windows installer server, a radius server, and a backup server. 

22. (currently amended) The system of claim 17, wherein the administrative 
operations services include any of: 

collection of statistics relating to the server process; 
servicing of requests for management of the server process; 
servicing of requests for management of operating system functions; 
servicing of requests for computer system resource allocation; 
servicing of requests for computer system resource re-allocation; 
servicing of operations that l equii e multiplexing of server processes; 
data backup and restore operations, update installation; 
security-related analysis and operations; 
audit of operations; 

network and other OS and application parameter configuration; 

driver installation and upgrade; 

spam filter operation; and 

firewall installation and configuration. 

23. (original) The system of claim 22, wherein the multiplexing is based on a 

network protocol addressing. 

24. (original) The system of claim 22, wherein the multiplexing is based on a content 
of a request directed to the server process. 
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25. (currently amended) The system of claim 17, wherein the administrative 
operations services include any of: 

servicing of requests for authorization within the operating system; 
servicing of requests for authorization within the server process; 
checking permissions for operations; 
creation and deletion of users; 
creation and deletion of groups; 
license-related management; 
remote access management; and 
security-related analysis and operations. 

26. (currently amended) The system of claim 17, wherein the administrative 
operations services include any of: 

servicing of requests that the server process is forbidden from executing; and 
servicing of operations that potentially can cause a fault in the server process. 

27. (currently amended) The system of claim 17, wherein the administrative 
operations services include application installation and configuration. 

28. (currently amended) The system of claim 17, wherein the administrative 
operations services include data backup and restore operations. 

29. (currently amended) The system of claim 17, wherein VPS isolation can include 
further comprises any of logical isolation of processes, physical isolation of processes , 
namespace isolation, data isolation, address isolation, fault isolation and performance isolation. 

30. (original) The system of claim 17, wherein VPS isolation includes resource 
isolation. 
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31. (currently amended) The system of claim 17, wherein the administrative 
operations services include any of: 

servicing of VPS migration requests; 
servicing of processes migration requests; and 
servicing of requests for computer system resources. 

32. (currently amended) A system for managing computer services provided to users 
comprising: 

a computer system; 

an operating system mnning on the computer system; 

a plurality of server processes running within on the computer system^ wherein the 
processes provide services to a plurality of remote users that provide a service to a user ; and 

an administrative server at least one designated Virtual Private Server (VPS) that 
instantiates and terminates the server processes in response to user requests for the service, 
wherein the designated VPS is isolated by a namespace isolation of processes. 

33. (original) The system of claim 32, wherein the server processes include any of a 
webserver, a file server, an FTP server, an authentication server, a VPS, a chroot environment 
server, a jail environment, a sand box environment server, a print server and a Windows 
Terminal Service, a P0P3 server, an IMAP/IMAP4 server, a SMTP server, a scheduler server, a 
COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP server, a 
Distributed file system server, a Distributed Link tracking server, an event log server, a reporting 
server, a DNS server, a file replicator server, an SSL server, an indexing server, a firewall server, 
a Kerberos server, an IPSEC server, an instant messaging sei-ver, a message write server, a logon 
server, a Network DDE server, an NLA server, a performance logs and alerts server, a plug and 
play server, a print spooler server, a protected storage server, a disk encryption server, a routing 
server, a remote access server, a security account manager server, a system event notification 
server, a telnet server, a telephony server, an uninterruptible power supply server, a virtual disk 
server, a Windows installer server, a Windows management instrumentation wireless 
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configuration server, a WMI performance adaptor server, a data base server, a Network address 
translation server, an IRC server, a chat server, an X windows server, an inetd server, a volume 
shadow copy server, a boot and remote boot server, a finger server, a secure shell (SSH) server, a 
who server, a rexec server, a webster server, a conference server, a radius server, a zip server, a 
socks server, an afbackup server, a backup server, an ASP server, a fido server, a WAP server, 
Plesk server™, a Virtuozzo™ server, a Virtuozzo for Windows™ server, a wireless access 
server, a wireless router and a wireless access point. 

34. (currently amended) The system of claim 32, wherein the instantiation is based 
on a network protocol addressing ef the user requests. 

35. (original) The system of claim 32, wherein the instantiation is based on a content 
of the user requests. 

36. (canceled) 

37. (withdrawn) A method for managing computer services provided to users 
comprising: 

receiving a request for service from a user; 
determining an addressee process of the request; 
determining if the addressee process has been instantiated and launched; 
instantiating and launching the addressee process if the addressee process has not been 
instantiated and launched; 

generating a response to the request; and 
sending the response to the user. 



Atty. Dkt. No. 2230.0050000/MBR/GSB 



- 12 - BELOUSSOV et al. 

Appl. No. 10/826,280 

38. (withdrawn) The method of claim 37, wherein the addressee is identified based 

on a network protocol addressing of the request. 

39. (withdrawn) The method of claim 37, wherein the addressee is identified based 
on a content of the request. 

40. (withdrawn) The method of claim 37, further including terminating the addressee 
process. 

41. (withdrawn) A computer program product for managing computer services 
provided to users, the computer program product comprising a computer useable medium having 
computei- program logic recorded thereon for controlling at least one processor, the computer 
program logic comprising: 

computer program code means for receiving a request for service from a user; 

computer program code means for determining an addressee process of the request; 

computer program code means for determining if the addressee process has been 
instantiated and launched; 

computer program code means for instantiating and launching the addressee process if 
the addressee process has not been instantiated and launched; 

computer program code means for generating a response to the request; and 

computer program code means for sending the response to the user. 

42. (withdrawn) The computer program product of claim 41, wherein the addressee 
is identified based on a network protocol addressing of the request. 

43. (withdrawn) The computer program product of claim 41, wherein the addressee 
is identified based on a content of the request. 
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44. (withdrawn) The computer program product of claim 41, further including 
computer program code means for teraiinating the addressee process. 

45. (withdrawn) A system for managing security of a computer environment 
comprising: 

a server; 

an operating system running on the server; 

a first Virtual Machine running on the server and dedicated to security functions; and 
a plurality of other Virtual Machines running on the computer and providing application 

services to users, wherein the first Virtual Machine implements security functions for the other 

Virtual Machines. 

46. (withdrawn) The system of claim 45, wherein the security functions include any 
of anti-spam, firewall, network security and content filtering. 
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